https://demosngcomsgblog.blogspot.com/2022/08/csrf-attack-with-form-get-and-iframe.html